Arch Linux

nagoola

Member

From: Germany / Ahrensburg

Registered: 2004-03-15

Posts: 52

ssh_exchange_identification: Connection closed by remote...

Hey everyone,

I am lately experiencing some wierd things with my ssh server. Since a couple days ago I cant log into my machines anymore. One of them I just installed and the other one is a bit older. I dont remember whether I updated the openssh package lately, but for some reason it always says

ssh_exchange identification: Connection closed by remote host

I can't even do the following:

ssh 127.0.0.1

Did something change in the config or am I being stupid?

Thanks for your help!!!

Kern

Member

From: UK

Registered: 2005-02-09

Posts: 464

Re: ssh_exchange_identification: Connection closed by remote...

Maybe try

-v      Verbose mode.

Causes ssh to print debugging messages about its progress. 
This is helpful in debugging connection, authentication, and
configuration problems.  Multiple -v options increase the verbosity. 
The maximum is 3.

also as superuser / root
ps ax |grep ssh

see what if any ssh stuff you have running

maybe if you updated something recently it reset the defaults as happened with another user recently in here. i think .

nagoola

Member

From: Germany / Ahrensburg

Registered: 2004-03-15

Posts: 52

Re: ssh_exchange_identification: Connection closed by remote...

I can connect again. Something did overwrite my hosts.allow. Now I have another problem - well, not really that bad but still wierd:
I cannot login as root anymore. I played around with the PermitRootLogin thingy in /etc/ssh/sshd_config - which was still set to yes - but nothing works.
Is there another place where I could look???
THANKS

Kern

Member

From: UK

Registered: 2005-02-09

Posts: 464

Re: ssh_exchange_identification: Connection closed by remote...

whats the error msg from the failed login ?
and also, maybe check your logs see if your ssh has been attacked recently.

Readup here

nagoola

Member

From: Germany / Ahrensburg

Registered: 2004-03-15

Posts: 52

Re: ssh_exchange_identification: Connection closed by remote...

Thanks for the reply. I kinda need the remote access as it is a server that is not standing at my desk - anyway - it is only accessanble from the local net and doesnt have a public IP. So that just add some safety.
I wont allow root login anymore though and of course I am only allowing and using SSH2.
Whatever - doesnt help to prevent brute forcing.

Tigertailz

Member

From: Sweden

Registered: 2007-09-11

Posts: 89

Re: ssh_exchange_identification: Connection closed by remote...

I have the same problem with -vvv I get
.../.ssh/identify type -1
.../.ssh/id_rsa type -1
.../.ssh/id_rsa type -1
ssh_exchange_identification: Connection cloesed by remote host

lucke

Member

From: Poland

Registered: 2004-11-30

Posts: 4,019

Re: ssh_exchange_identification: Connection closed by remote...

Do you have sshd:ALL in /etc/hosts.allow?

I think it spits out similar error if it ain't there.

Last edited by lucke (2007-09-15 17:14:29)

Tigertailz

Member

From: Sweden

Registered: 2007-09-11

Posts: 89

Re: ssh_exchange_identification: Connection closed by remote...

Yes yes I have, I followed the wiki.